simpl.
로그인
사이버보안 GRC 13개 항목

Cloud Access Security Broker (CASB) Deployment Review

이 체크리스트는 영어로 제공됩니다.

Assesses a CASB deployment covering SaaS discovery, access governance, data protection, threat detection, and deployment mode coverage.

CSA CCMNIST 800-53CIS

무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.

Discovery & Visibility

  • Is shadow IT discovery enabled to identify unsanctioned SaaS usage? *
  • Are discovered cloud apps risk-scored and categorized as sanctioned/unsanctioned? *
  • Are sanctioned SaaS apps connected via API for deep visibility? *

Deployment Modes

  • Are appropriate deployment modes (API, forward proxy, reverse proxy) selected per use case? *
  • Is inline traffic inspection coverage validated for managed and unmanaged devices?
  • Is the CASB integrated with the identity provider for session context? *

Access & Data Protection

  • Are DLP policies enforced on data uploaded to or shared from sanctioned SaaS apps? *
  • Are adaptive access controls applied based on user, device, and risk? *
  • Are external sharing and public link risks in cloud storage monitored and controlled? *
  • Are OAuth app grants to third-party apps reviewed and risky grants revoked?

Threat Detection & Response

  • Is anomalous activity (impossible travel, mass download, compromised accounts) detected? *
  • Are CASB alerts forwarded to the SIEM/SOC for correlation and response? *
  • Are automated response actions (block, quarantine, revoke session) configured for high-severity events?

Cloud Access Security Broker (CASB) Deployment Review 체크리스트 전체 다운로드

인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.